CO 

CD 



Modifier i 
304 1 






Public 
Key 
302 




Private 
Key 
300 






Hash 
Value 
306 






1 




SHELESTetal., METHODS AND SYSTEMS FOR UNILATERAL 
AUTHENTICATION OF MESSAGES 

Leydig, Voit & Mayer, Chicago - Telephone (312) 616-5600, Atty Docket 212159 



400 Chose public key/private key pair. 
402 Set route prefix of PKD address. 

1 

404 Set node-selectable portion of PKD 
address: 



1 



406 Set node-selectable portion of PKD 
address to part of hash of public key. 




410 Choose a modifier. 



i 

412 Set node-selectable portion of 
PKD address to part of hash of (public 
key and modifier). 



Done. 



FIG. 4 
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FIG. 6 



600 Set PKD address using the procedure of 

Figure 4. 

1 

602 Create hash of data to authenticate 
(typically including PKD, authenticated 
nnessage content data, time stamp, and 
identifier of intended recipient). 



1 

604 Create cryptographic signature of hash 
created in Step 602 using private l<ey 300 of 

Figure 3. 



1 

606 Populate the message with PKD 
address, public key, modifier if used to 

create PKD address, cryptographic 
signature, message content data, and, 
optionally, time stamp and identifier of 
intended recipient. 

1 

608 Send the message to its intended 
recipient. 



Done. 
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FIG. 7 



700 Is time stampi^^^Yes 
if present, too old? 

No 



702 Does received 
identifier of intended recipient, if 
present, match actual^ 
Recipient? 

Yes 



704 Create hash of (received public key and 

modifier, if present). 




708 Use received public key to validate 
received cryptographic signature and extract 

hash. 



I 



710 Create hash of authenticated portions of 
the message. 



712 Does 
created hash 
equal received 
hash? 

Yes 



Authentication succeeds. 



Authentication fails. 
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FIG. 8a 




802 Create hash of (received public key and 
modifier, if present). 




806 Use received public key to validate 
received cryptographic signature and extract 

hash. 



808 Create hash of authenticated data 
portions of the message. 




812 Compare received public key/network 
address with associations already in cache. 
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8b 



A 



814 Does received 
public l<ey/network address 
match an association 
already in cachej^ 



Yes 



816 Reset 
association timer. 



818 Does received 
fietwork address match networF 
address of an association, 
already in cache*^ 



Yes 



820 Remove 
association 
already in cache 
from cache. 



Add received public key/ 
network address association 
to cache. 



Discard received public 
key/network address. 
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FIG. 9 




902 Compare received public l<ey/network 
address with associations already in cache. 




Perform full authentication check 
beginning at step 702 of Figure 
7. 



Authentication fails. 



